Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/2b0dd749-b3f4-3bbe-a6ba-892c1a1e84ba.roa
File: 2b0dd749-b3f4-3bbe-a6ba-892c1a1e84ba.roa (raw, json)
Hash identifier: 1x3vKM+YvNNuR9pQB/kFMZ7lbmdW/MZ+1l0kLzirixo=
Subject key identifier: 50:57:42:0F:41:14:03:9F:EF:04:13:A3:72:B3:C0:4A:26:E3:61:CD
Certificate issuer: /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial: 010D0C9F43285848E9CBE1EFEE99762514E2CE80
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/2b0dd749-b3f4-3bbe-a6ba-892c1a1e84ba.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 192.210.16.0/20 maxlen: 24
2620:44:4000::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e1:ef:ee:99:76:25:14:e2:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=bab3bf1d-1494-4bd2-ab3a-0af7019ad5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:03:14:0f:6a:1b:6e:1c:71:3d:a7:1c:48:
7e:13:26:58:c7:8a:c2:86:99:52:15:20:65:67:f3:
8c:29:8a:10:58:1a:15:04:6f:52:38:5a:7b:4c:3d:
7e:89:39:60:18:f3:38:27:09:73:42:20:5c:bc:02:
45:bd:74:05:9e:3f:b1:75:c8:0c:ff:52:46:69:f8:
0b:5b:26:57:25:f6:f1:ee:6b:07:af:24:95:a7:19:
07:43:cd:c3:68:c9:dc:7b:d1:94:00:64:4e:bb:24:
00:d8:e7:39:18:6c:11:b6:1d:18:1c:7d:95:f7:47:
91:0a:c2:00:d8:7e:15:ef:38:0f:63:08:86:f7:62:
38:f8:b0:35:96:d6:4d:5a:03:5f:a3:5e:d7:0a:83:
71:8f:ae:cf:43:d9:6b:00:4d:eb:fa:be:09:c5:2e:
ab:f7:75:23:94:67:3e:80:71:21:e5:a9:63:bb:7b:
3b:ca:31:34:dd:ad:ba:bc:0c:d6:aa:9a:12:6e:46:
6d:de:b8:85:ef:0b:92:12:3c:a3:26:d8:f3:a6:2f:
f8:00:b5:f7:69:37:ff:5e:3a:d9:18:f4:a8:52:8d:
8c:61:eb:e4:69:87:8a:73:0c:5b:82:64:7b:db:6d:
2a:92:8f:ed:62:03:ae:e9:a3:6e:ac:5b:dd:07:9e:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:57:42:0F:41:14:03:9F:EF:04:13:A3:72:B3:C0:4A:26:E3:61:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/2b0dd749-b3f4-3bbe-a6ba-892c1a1e84ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl
X509v3 Authority Key Identifier:
keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.210.16.0/20
IPv6:
2620:44:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:43:07:2f:50:d6:a1:f4:b9:0c:9e:00:11:75:f7:24:79:8f:
da:04:71:82:22:28:f4:7c:6a:2f:f2:39:46:f5:04:f2:c2:72:
cf:43:ba:5a:92:5d:8d:99:c1:cc:3d:58:62:d2:55:30:22:d0:
ad:c7:55:c3:c3:1a:d6:61:ce:63:49:60:32:db:c7:96:3f:c2:
4b:fc:db:f1:d0:f3:67:71:aa:81:03:c7:a2:ad:b2:d5:5c:06:
5e:f6:43:02:f2:9b:e5:ab:23:05:81:ec:ea:7b:40:f0:6b:87:
ad:3e:8c:07:cf:f7:65:cc:66:12:99:b8:a0:ae:84:55:e3:d0:
98:14:24:76:54:85:21:af:45:c3:8b:c7:25:e1:b1:a6:b3:dc:
f2:27:d3:6c:95:7e:5d:20:74:50:a4:55:ed:a5:c4:2e:9f:ae:
93:d9:42:2b:18:6d:bd:e7:04:30:0e:66:84:2e:9f:ae:98:74:
b0:2f:19:d4:ed:15:aa:1a:62:70:0c:ce:e5:09:e3:93:0d:fa:
1a:e2:a2:e4:6c:13:ee:e6:21:c7:28:a3:96:e8:4b:fe:be:d7:
9c:d0:1e:04:cf:7a:4c:23:ae:78:6d:40:97:0e:af:ab:dd:bd:
10:9f:61:8a:83:39:6c:fb:22:4d:34:ed:36:e3:99:3c:05:43:
5e:bb:b9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:05 2025 by rpki-client